diff --git a/roles/keyserver/files/sks.conf b/roles/keyserver/files/sks.conf
index 9870207e05..3fb60c9ec0 100644
--- a/roles/keyserver/files/sks.conf
+++ b/roles/keyserver/files/sks.conf
@@ -50,6 +50,7 @@ NameVirtualHost *:443
         ServerAdmin sysadmin-keys-members@fedoraproject.org
         ServerName keys.fedoraproject.org
 	ServerAlias keys02.fedoraproject.org
+        Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
 
         SSLEngine on
         SSLCertificateFile /etc/pki/tls/wildcard-2014.fedoraproject.org.cert
@@ -62,7 +63,6 @@ NameVirtualHost *:443
 	ProxyPassReverse / http://localhost:11371/
         SetEnv proxy-nokeepalive 1
 	ProxyVia Full
-        Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
 </VirtualHost>
 <VirtualHost *:443>
         ServerAdmin sysadmin-keys-members@fedoraproject.org